Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
File: xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json)
Hash identifier: IAaG93/Cn1+AqlKunjDEODXkhMa7Zd5hBqppgJSlZj8=
Subject key identifier: A3:EB:0E:35:97:93:EA:BA:F2:96:2B:1F:69:C0:19:0D:AD:F6:6C:66
Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
Certificate issuer: /CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Certificate serial: 0196B4B458E44BDCE25B67815B029CA769B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
Manifest number: 0609
Signing time: Fri 09 May 2025 11:00:40 +0000
Manifest this update: Fri 09 May 2025 11:00:40 +0000
Manifest next update: Sat 10 May 2025 11:00:40 +0000
Files and hashes: 1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: g/IzbG1jyqZeXgNMv12VPLaY9mlQaScwxc0Mpqn26YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:58:e4:4b:dc:e2:5b:67:81:5b:02:9c:a7:69:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Validity
Not Before: May 9 11:00:40 2025 GMT
Not After : May 10 11:00:40 2025 GMT
Subject: CN=a3eb0e359793eabaf2962b1f69c0190dadf66c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:1c:2b:f8:70:a7:7e:5e:ed:46:f0:b4:46:
f5:46:26:73:51:88:aa:83:62:06:23:1d:5f:64:c6:
0b:d9:78:95:73:60:34:e7:de:5e:e5:ff:39:52:fe:
43:7b:f9:77:c6:d0:a4:29:0c:ef:ab:67:a2:a1:fd:
9e:27:b3:e2:7a:a1:33:1a:dc:3a:f6:36:f3:27:57:
47:91:23:2a:cb:79:7f:fd:e8:41:99:ee:8f:a6:3c:
04:27:fe:f4:78:46:b0:62:de:4b:de:00:a0:8d:69:
76:c4:f1:ed:17:28:b5:dc:0a:a4:56:c9:49:0a:d4:
e0:b3:b0:e5:03:9a:ce:63:ce:fa:03:b8:f9:b1:22:
ab:08:0a:03:0e:9a:5d:e2:b0:78:b3:6a:c0:c6:a6:
9b:c8:c9:0a:d5:9e:00:be:ad:48:d3:65:22:07:19:
02:25:39:b1:63:02:37:70:a3:d6:64:87:17:6a:2f:
6e:4c:55:8e:55:d7:55:63:0b:55:cf:61:ab:cd:e1:
ab:8d:6d:e9:d9:cd:f5:5a:83:fa:ef:34:43:03:66:
62:11:3a:93:0a:1c:2d:1e:3f:37:ef:29:c4:87:c8:
45:82:a2:34:74:15:04:8f:e8:55:bc:97:13:11:90:
f4:c4:db:6f:1d:02:de:f3:4e:86:9e:68:16:b8:48:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:0E:35:97:93:EA:BA:F2:96:2B:1F:69:C0:19:0D:AD:F6:6C:66
X509v3 Authority Key Identifier:
keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9d:60:d7:f7:63:13:c8:42:6e:77:33:fe:58:93:58:ed:92:
b4:84:f0:b8:aa:6b:98:68:6e:94:94:23:06:77:36:c9:15:f4:
6f:e0:ae:93:18:1d:74:3b:e5:b2:7e:b0:b3:25:d4:f7:8e:31:
d6:dd:88:af:4b:96:08:75:8d:42:f8:d3:3f:6d:fa:7d:59:2a:
85:dd:4e:cd:1b:18:c6:f6:51:fe:f2:51:27:5d:47:fa:3a:2b:
27:86:ff:15:88:5f:c5:ad:1f:67:38:63:91:48:86:bc:96:da:
19:f9:f6:7f:8a:a6:97:af:b0:3e:1d:d9:29:d4:09:f9:df:1a:
81:29:12:78:54:cc:9a:e8:67:80:ac:14:fb:ef:b0:76:49:74:
00:16:69:df:36:20:39:7e:59:f0:92:32:e4:49:1d:90:d7:c5:
2a:1b:c0:18:16:05:8b:4b:61:a5:19:6a:27:31:c2:62:25:4a:
40:d3:27:20:c0:0c:59:d6:3b:a8:5c:a8:a3:f9:69:54:98:34:
72:97:67:11:59:ab:e2:a1:8b:50:7d:c7:bf:86:2f:9a:2c:61:
e4:b4:ae:81:65:c6:2a:c0:ec:04:2b:65:25:b9:fb:94:5c:9a:
ec:b7:ba:ed:15:37:07:10:3b:43:4d:46:cb:b5:9d:eb:03:42:
79:94:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:04:51 2025 by rpki-client